 Andrew Case
|
2da5aec5ce
|
Linux - update system call API
|
2017-08-17 22:57:27 -05:00 |
|
|
Andrew Case
|
4b680c86ec
|
Linux - add support for indexes for both system call tables on 64 bit systems
|
2017-08-17 19:18:06 -05:00 |
|
|
Andrew Case
|
f56382a389
|
Linux - remove prints and update api for linux_moddump
|
2017-08-17 04:01:55 -05:00 |
|
|
Andrew Case
|
5a64808793
|
Linux - update check_fop through 4.13 and with more checks
|
2017-08-14 19:01:48 -05:00 |
|
|
Andrew Case
|
7f9f7715db
|
Linux - add stricter checks in cached file enumeration
|
2017-08-14 18:59:40 -05:00 |
|
|
Andrew Case
|
68065613c3
|
Linux - remove dead code from keyboard_notifiers
|
2017-08-01 09:29:42 -05:00 |
|
|
Andrew Case
|
0d8eb81eab
|
Linux - add support for file extraction through 4.13
|
2017-07-31 23:12:03 -05:00 |
|
|
Andrew Case
|
9c9315ac3e
|
Linux - add support for module scanning, extraction, and enumeration through 4.13
|
2017-07-31 14:11:01 -05:00 |
|
|
Andrew Case
|
c84c491a11
|
Update kref reference counter handling for 4.12
|
2017-07-31 13:07:26 -05:00 |
|
|
atcuno
|
f93390e09c
|
Linux - fix module reference
|
2017-06-09 13:38:58 -05:00 |
|
|
Fabio
|
1bdb319ab4
|
ktime_t is not a union anymore
|
2017-05-13 15:08:43 +02:00 |
|
|
Andrew Case
|
f803a13bc3
|
Merge pull request #403 from bneuburg/issue-392-fixed
Use read_long_long_phys for LinuxAMD64PagedMemory address
|
2017-05-08 08:40:07 -05:00 |
|
|
atcuno
|
3619c8a32f
|
Linux - add support for kernel physical ASLR in 4.9+ kernels
|
2017-05-04 18:06:37 -05:00 |
|
|
atcuno
|
51c8248eae
|
Linux - hardend arp against smear
|
2017-04-29 12:03:43 -05:00 |
|
|
atcuno
|
58c40cc97c
|
Linux - harden dmesg against smear
|
2017-04-29 12:00:09 -05:00 |
|
|
atcuno
|
b66d5f8da4
|
Linux - move boot time calculation into common for clear API access
|
2017-04-28 16:41:41 -05:00 |
|
|
Bastian Neuburger
|
595ef3c388
|
Use read_long_long_phys for LinuxAMD64PagedMemory address space insted of read_long_phys
|
2017-04-13 06:38:51 +02:00 |
|
|
atcuno
|
266005c070
|
Linux - add support through Linux 4.9 for cpuinfo
|
2016-11-18 10:28:09 -06:00 |
|
|
atcuno
|
bc824fd3e2
|
Linux - fix smearing issue check_fops and substantially improve performance
|
2016-11-18 10:18:08 -06:00 |
|
|
atcuno
|
b223e10889
|
Linux - remove print and add infinite loop protection to bash_hash
|
2016-10-25 16:03:35 -05:00 |
|
|
atcuno
|
4d5fbcb61a
|
Linux - re-enable strict validation of linux_bash_hash
|
2016-10-25 15:49:24 -05:00 |
|
|
atcuno
|
1d65795714
|
Linux - fix overflow error in ARP table size calculation
|
2016-10-25 13:50:29 -05:00 |
|
|
atcuno
|
2ff525da7d
|
Linux - fix hidden modules related to issue 273
|
2016-10-17 11:41:02 -05:00 |
|
|
atcuno
|
33d461c312
|
Linux - check for corruption on hash table size in arp table enumeration
|
2016-10-17 11:25:29 -05:00 |
|
|
atcuno
|
f85cb934d9
|
Linux - ensure address checks are done on int and not CType
|
2016-10-17 11:21:43 -05:00 |
|
|
atcuno
|
527bf4d6f2
|
Linux - add support for kaslr kernels
|
2016-10-17 10:20:43 -05:00 |
|
|
atcuno
|
534374da57
|
Linux - fix two bugs
|
2016-10-07 09:36:31 -05:00 |
|
|
atcuno
|
3d326487e2
|
Linux - add linux_psscan
|
2016-06-06 16:33:04 -05:00 |
|
|
atcuno
|
324dd7341d
|
Linux - fix file extraction for 4.6plus
|
2016-06-06 13:39:01 -05:00 |
|
|
atcuno
|
dd1a851b6e
|
Linux - final fix for arp
|
2016-06-06 12:33:33 -05:00 |
|
|
atcuno
|
9d220063ac
|
Linux - final AF_UNIX fix
|
2016-05-23 13:14:32 -05:00 |
|
|
atcuno
|
ec09685213
|
Linux - fix syscall index parsing
|
2016-05-22 19:00:01 -05:00 |
|
|
Michael Ligh
|
baeff2a4f1
|
add an initial safety check to guard against memory corruptions and the different implementations of the arp structures seen between opensuse kernels and others
|
2016-05-22 18:22:53 -05:00 |
|
|
Andrew Case
|
7de83e416e
|
Merge pull request #301 from haco20292/linux_dmesg_bugfix
Fix an exception in linux_dmesg
|
2016-05-09 12:38:12 -07:00 |
|
|
atcuno
|
5d873fb862
|
Linux - small updates
|
2016-04-29 14:37:08 -05:00 |
|
|
atcuno
|
95797fe1fb
|
Linux - don't print default entries in netscan
|
2016-04-26 15:47:00 -05:00 |
|
|
atcuno
|
f98d221ec1
|
Linux - avoid corruption in mount
|
2016-04-26 15:46:29 -05:00 |
|
|
atcuno
|
461ea435d6
|
Linux - make malfind print disasm correctly
|
2016-04-26 15:46:01 -05:00 |
|
|
haco20292
|
f2c094ed8f
|
Fix an exception in linux_dmesg
There're two "log_buf" symbols, one is d-type and the other is b-type.
|
2016-04-27 01:09:13 +08:00 |
|
|
atcuno
|
429a160925
|
Linux - add parent pid column to pslist
|
2016-04-07 15:19:23 -05:00 |
|
|
atcuno
|
16d4bc9292
|
Linux - more corruption checks
|
2016-04-03 10:44:22 -05:00 |
|
|
atcuno
|
1baceabb8f
|
Linux - clean up linux_mount from mem corruption
|
2016-03-30 11:30:02 -05:00 |
|
|
atcuno
|
87839eccfe
|
Linux - update output handling
|
2016-02-02 11:46:54 -06:00 |
|
|
gleeda
|
27853defce
|
Merge pull request #187 from cyli/fix-linux-pkt-queues
Fix linux_pkt_queues
|
2015-12-21 11:44:38 -05:00 |
|
|
atcuno
|
eb7f561bd1
|
Linux - add support for kernels through 4.3.2
|
2015-10-21 12:50:25 -05:00 |
|
|
atcuno
|
a7c78fce91
|
Linux - add back render text to threads
|
2015-09-09 21:21:50 -05:00 |
|
|
atcuno
|
9c6b5655dd
|
Linux - change pstree logic
|
2015-09-09 21:18:32 -05:00 |
|
|
atcuno
|
d2a40fc882
|
Linux - add back render_text to pstree
|
2015-09-09 14:39:10 -05:00 |
|
|
gleeda
|
3b378a2d4b
|
Merge pull request #236 from kost/fix-linux-check-inline
Fix exception when prev_op is None
|
2015-09-03 09:36:45 +02:00 |
|
|
gleeda
|
ec3fdeede0
|
Merge pull request #224 from martarek/More_Unified_Outputs
Added unified outputs and additionnal output info useful in finding some rootkits on Android
|
2015-08-28 12:07:23 -04:00 |
|